This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: 6S97HlvdnxMyveIMuRKz9AM3OhJDgtFyqni/pgkpRlk= Subject key identifier: 46:3E:FA:B1:05:66:56:97:62:85:2D:39:68:0A:18:C3:0F:EA:25:1F Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 5DEC3F7EF37F582D0A4009EDF00AE78D68D57A1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0387 Signing time: Sat 06 Dec 2025 18:21:21 +0000 Manifest this update: Sat 06 Dec 2025 18:16:21 +0000 Manifest next update: Tue 09 Dec 2025 22:51:21 +0000 Files and hashes: 1: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: ZKL6TGC1lIzvi1ReKIzSkvOEGT3lP963CepKqAbY5Ps=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ec:3f:7e:f3:7f:58:2d:0a:40:09:ed:f0:0a:e7:8d:68:d5:7a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Dec 6 18:16:21 2025 GMT Not After : Dec 9 22:51:21 2025 GMT Subject: CN=463EFAB10566569762852D39680A18C30FEA251F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:1c:fb:02:b7:bd:b9:09:c2:38:cf:9a:a1: 8d:47:4f:70:76:a6:2b:91:f9:4d:66:31:a4:5b:93: ab:bd:51:0b:1b:50:1e:88:0d:a2:80:9a:82:02:11: 59:62:6f:fd:36:77:3a:f1:95:f5:aa:ca:22:79:58: 50:32:14:85:25:6c:ab:0c:c2:1d:15:59:86:cb:01: 9d:31:74:78:29:42:8e:6f:1c:11:b7:9a:e5:a4:cf: 45:1b:95:1d:6d:67:c4:08:0d:a4:9c:37:b6:c3:3e: 20:0f:f3:be:21:e4:47:4f:cc:bd:38:83:ff:9c:79: b2:08:5c:69:13:42:7e:69:eb:9d:08:a6:0b:48:26: f3:79:79:0b:4d:83:d1:9a:3d:41:96:45:40:27:1b: fc:f8:64:9b:ba:3c:1d:dc:b2:1b:ae:d7:80:ec:ce: 66:2a:4e:a7:29:3c:e2:76:6c:34:93:78:c1:ef:e6: 56:70:f9:b5:c4:b9:21:6b:02:cb:59:4c:a1:38:46: 9b:be:d5:4c:b5:15:41:bc:63:65:7d:22:85:20:f9: d5:6d:ca:13:2f:e5:18:a1:6b:7c:73:59:61:c1:4f: f6:68:1b:26:89:76:c3:4b:6d:c1:ab:15:d2:f8:4f: fd:23:08:36:2f:bf:9a:8c:0b:ff:b7:21:56:09:0d: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3E:FA:B1:05:66:56:97:62:85:2D:39:68:0A:18:C3:0F:EA:25:1F X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c7:f3:31:3b:ff:ea:7d:43:98:94:39:fb:e4:ad:61:9a:07: b2:72:c5:38:6a:22:04:82:a0:56:9f:a3:dd:b0:93:4d:a7:29: 63:51:21:18:6b:bd:0b:bd:a9:df:ff:a4:e5:ff:65:95:81:25: c9:5b:6f:20:b6:4b:65:35:24:c7:dc:ac:70:50:88:5b:9a:27: e9:0e:50:32:6c:a7:10:ca:3e:d6:9a:82:84:60:da:5e:1f:06: 61:4e:bb:0e:bb:e7:c0:c1:f9:29:30:1c:55:24:05:0b:6d:23: 81:7a:3a:a7:a8:46:6f:d7:7a:b0:66:24:76:5d:54:f7:18:0d: 81:57:32:81:61:a0:16:98:39:c8:9f:99:d6:0c:7a:52:49:76: 2f:3e:84:f2:5d:94:ff:59:f8:8b:ae:00:c9:43:5b:94:d2:bd: 28:5c:04:77:6e:d8:e3:9f:9e:e2:80:94:dd:e2:3b:f0:60:94: f7:70:7f:d1:35:42:77:0c:c8:e4:80:3e:82:5a:c6:f2:90:7b: 42:3d:eb:24:0d:0a:73:18:cd:37:0e:81:ef:ff:17:dc:f9:5a: e3:21:4c:62:c0:54:c2:6a:08:34:e2:3b:59:b2:af:0d:86:a9: a0:06:2d:e9:97:b7:38:3e:5d:8a:b6:5c:54:f4:b0:3a:d1:1c: 19:41:5c:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXew/fvN/WC0KQAnt8ArnjWjVeh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTEyMDYxODE2MjFaFw0yNTEyMDkyMjUxMjFaMDMxMTAvBgNV BAMTKDQ2M0VGQUIxMDU2NjU2OTc2Mjg1MkQzOTY4MEExOEMzMEZFQTI1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVxz7Are9uQnCOM+aoY1HT3B2 piuR+U1mMaRbk6u9UQsbUB6IDaKAmoICEVlib/02dzrxlfWqyiJ5WFAyFIUlbKsM wh0VWYbLAZ0xdHgpQo5vHBG3muWkz0UblR1tZ8QIDaScN7bDPiAP874h5EdPzL04 g/+cebIIXGkTQn5p650IpgtIJvN5eQtNg9GaPUGWRUAnG/z4ZJu6PB3cshuu14Ds zmYqTqcpPOJ2bDSTeMHv5lZw+bXEuSFrAstZTKE4Rpu+1Uy1FUG8Y2V9IoUg+dVt yhMv5Riha3xzWWHBT/ZoGyaJdsNLbcGrFdL4T/0jCDYvv5qMC/+3IVYJDU2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURj76sQVmVpdihS05aAoYww/qJR8wHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPH8zE7/+p9Q5iUOfvkrWGaB7JyxThqIgSC oFafo92wk02nKWNRIRhrvQu9qd//pOX/ZZWBJclbbyC2S2U1JMfcrHBQiFuaJ+kO UDJspxDKPtaagoRg2l4fBmFOuw6758DB+SkwHFUkBQttI4F6OqeoRm/XerBmJHZd VPcYDYFXMoFhoBaYOcifmdYMelJJdi8+hPJdlP9Z+IuuAMlDW5TSvShcBHdu2OOf nuKAlN3iO/BglPdwf9E1QncMyOSAPoJaxvKQe0I96yQNCnMYzTcOge//F9z5WuMh TGLAVMJqCDTiO1myrw2GqaAGLemXtzg+XYq2XFT0sDrRHBlBXHs= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:53 2025 by rpki-client